Richard Fuchs writes:
I agree with your objections in that trusting the SDP address should probably be the default, but I see no reason to remove functionality that some people may find useful. There's at least one case where trusting the SDP address can be problematic (packet forwarding loops). The best way of action would probably be to create a new flag with the opposite effect and then transition over to that one.
It is OK to have trust-address flag. What I doubt is what is the point in sending source IP address of SIP request to rtpengine if trust-address is not present, because that address may have nothing to do with rtp media.
-- Juha